Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3KDKnt4N1kaVYO5cJoBomMZhBKI.roa
File: 3KDKnt4N1kaVYO5cJoBomMZhBKI.roa (raw, json)
Hash identifier: MYr27t+UpY1nV8Z5RMAwd4JpyhndolDAT0zGy5OlcpY=
Subject key identifier: DC:A0:CA:9E:DE:0D:D6:46:95:60:EE:5C:26:80:68:98:C6:61:04:A2
Certificate issuer: /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial: 019420686D3F5B7360F7846B7981D3A4ABF4
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3KDKnt4N1kaVYO5cJoBomMZhBKI.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15504
IP address blocks: 91.213.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6d:3f:5b:73:60:f7:84:6b:79:81:d3:a4:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dca0ca9ede0dd6469560ee5c26806898c66104a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:97:46:a4:1e:59:e9:70:3e:7e:28:92:56:
93:b0:3a:29:b0:2c:31:4e:b7:f1:b4:3b:76:a5:20:
03:79:31:74:83:c3:21:40:4c:74:9d:36:92:49:fd:
1e:1b:39:21:9d:68:30:dc:82:ba:c6:00:ca:e5:d5:
fc:80:7b:d6:44:cd:40:fb:13:06:a2:03:fd:63:a1:
c9:77:36:ab:b4:60:de:6f:f7:cd:99:78:74:06:65:
15:7c:45:e4:2a:e6:eb:e5:4d:bf:d4:06:5d:f4:85:
bd:6d:ff:86:ea:7c:9c:c6:23:fe:64:f3:3d:5b:9d:
0c:94:78:0e:45:67:3f:6b:c1:82:da:bd:28:9d:a0:
4a:87:5b:42:cd:04:09:3c:af:26:7d:19:ec:de:2d:
10:1f:3e:e3:14:fe:ff:c9:fe:a8:5a:7c:49:38:75:
d3:61:9e:0b:85:49:f4:b0:29:71:90:af:df:95:a1:
fb:ce:34:e3:0e:be:50:e0:e4:59:e2:3b:f1:8f:65:
76:00:4c:6f:50:ab:b7:ec:d6:3e:63:21:e7:22:88:
0e:49:63:06:f8:6b:5a:17:45:84:68:98:bc:65:6c:
5f:20:91:0a:66:e4:b4:0d:e2:61:cb:1d:e6:ec:2a:
c9:ae:f4:05:e4:89:35:98:65:18:0d:62:13:40:42:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:CA:9E:DE:0D:D6:46:95:60:EE:5C:26:80:68:98:C6:61:04:A2
X509v3 Authority Key Identifier:
keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/3KDKnt4N1kaVYO5cJoBomMZhBKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.152.0/24
Signature Algorithm: sha256WithRSAEncryption
95:86:68:a1:bf:56:64:44:b6:92:24:aa:b8:f7:cd:f5:a2:68:
00:b4:03:84:38:a3:f4:66:5a:f2:c8:6b:59:4f:d1:13:16:32:
81:7a:a9:d4:da:e8:7d:47:81:4a:cb:a5:6d:f9:23:84:58:7f:
ff:24:c3:08:e7:c6:2c:d7:8a:2c:2c:1a:56:f5:b9:14:7e:66:
b2:df:86:96:b3:0d:de:dd:7d:b8:94:bf:f6:90:1c:a3:74:f0:
6d:ee:a0:06:cc:cf:64:03:f7:c9:a6:46:bb:71:ac:2a:75:9a:
43:0d:c7:f5:4c:c1:9b:7c:09:f0:59:3c:91:a9:ce:81:13:e0:
32:f5:e6:3f:5c:0d:95:dd:ee:42:4f:b6:57:a6:2c:67:37:e4:
36:fc:90:25:42:a0:27:bf:47:17:95:8a:60:e7:f8:b1:a5:6a:
a9:0b:6e:dd:50:12:b2:ee:8b:b3:56:90:92:b2:d4:ef:de:0a:
cc:56:1d:36:52:bd:d7:11:26:c6:b9:82:d6:6f:e4:f9:ce:3e:
35:ef:13:a2:ac:54:6f:7a:78:c7:39:2e:f9:a4:9f:44:c7:31:
0e:5b:2a:8e:4a:9c:60:cb:35:d2:97:42:f7:af:fc:0c:30:66:
d3:7b:40:a4:57:a0:fc:47:e1:d8:e5:8e:83:f6:5f:9b:0c:aa:
44:18:56:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:11 2025 by rpki-client